Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5C1A40C397311F1ABE6BDD6CE1D38B0.roa
File: C5C1A40C397311F1ABE6BDD6CE1D38B0.roa (raw, json)
Hash identifier: ZcaoG75QtWlzDWNIyHylX/nVS+OdQMXJqSwmLaVRNcg=
Subject key identifier: 43:A1:BC:2D:C8:BE:5A:C5:3A:8E:5B:4D:76:D3:81:65:F0:A4:7F:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AD05
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5C1A40C397311F1ABE6BDD6CE1D38B0.roa
Signing time: Thu 16 Apr 2026 09:08:03 +0000
ROA not before: Thu 16 Apr 2026 09:07:58 +0000
ROA not after: Wed 29 Apr 2026 09:07:58 +0000
asID: 3257
IP address blocks: 156.228.7.0/24 maxlen: 24
156.228.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109829 (0x1ad05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 09:07:58 2026 GMT
Not After : Apr 29 09:07:58 2026 GMT
Subject: CN=69e0a6f3-d113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:42:40:ad:05:95:2c:7f:13:08:19:b7:28:de:
fd:8a:14:a8:d9:bd:42:f3:fc:e2:0f:9c:ac:b2:68:
7a:f7:b6:25:4f:e1:9d:8c:66:a2:91:bf:50:db:8b:
2a:e1:4d:2b:47:44:13:be:87:a0:c4:ae:78:58:ff:
38:a9:07:52:c2:6f:4d:37:dd:2c:fb:28:4a:fb:d8:
5a:c8:9c:72:24:d2:c1:0a:d9:42:41:d7:7d:3c:2e:
b8:55:9a:9a:50:0c:4d:77:7c:27:b0:9a:90:72:7d:
de:f2:05:9d:d4:af:f9:67:db:f1:e7:5b:47:fe:e3:
4b:27:57:7d:58:42:ce:19:15:a8:b7:8e:f5:5e:85:
50:37:aa:05:1f:59:d9:ad:fa:9a:10:76:88:6a:17:
02:b4:bd:47:d1:b1:ba:e1:0a:9c:d8:39:04:13:27:
74:ca:2a:7f:d4:6e:f1:57:ea:38:17:a9:df:69:9d:
bb:0e:44:5b:73:c3:0f:c8:b7:34:c6:61:4f:f0:64:
f0:dc:78:f1:8e:ba:e7:c3:8f:0c:0a:6b:b8:a7:c3:
18:d1:2b:6a:a7:83:80:01:5b:29:a5:ca:74:fa:7e:
4c:12:7e:cf:33:cf:76:69:36:82:33:4d:04:01:99:
12:58:ed:da:34:77:c9:f9:ca:85:51:97:93:27:60:
bf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A1:BC:2D:C8:BE:5A:C5:3A:8E:5B:4D:76:D3:81:65:F0:A4:7F:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5C1A40C397311F1ABE6BDD6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.7.0/24
156.228.9.0/24
Signature Algorithm: sha256WithRSAEncryption
25:e4:ae:b2:22:5a:48:cc:04:7a:38:34:8d:63:9f:fd:d8:71:
ac:05:00:0b:32:44:8f:2b:c0:32:0a:24:3d:56:7c:b1:99:87:
78:93:95:93:75:44:8c:09:a2:8a:e3:65:c5:0c:7b:07:b7:bc:
65:5e:2d:54:fc:f8:31:11:87:52:eb:5e:01:73:de:fc:b8:75:
55:de:aa:8b:94:58:a1:a9:bc:ec:e8:91:25:7b:e8:9f:e9:62:
0b:9b:ac:f6:ff:e2:58:15:aa:9f:55:b2:5f:d9:45:c6:14:0d:
e7:5f:2e:b9:80:bc:a7:ab:b3:26:f8:7e:5d:26:c3:e3:96:ce:
81:72:92:56:d6:b1:9f:6e:cf:1f:67:ec:66:4b:ec:d2:49:32:
20:10:a7:86:fe:15:1d:5c:a2:43:20:1f:a5:4c:4c:db:19:a7:
f5:81:9b:74:4b:30:ea:01:ba:2c:c3:ab:16:60:82:4f:9d:bd:
f4:7c:44:e1:8c:01:5f:7b:c8:89:b8:26:c1:a6:27:9b:02:c9:
da:89:78:07:f5:6b:fd:ed:a0:59:08:b8:82:a9:be:01:fe:33:
7d:d0:7c:da:1c:1e:a7:b6:42:59:41:e4:a9:0c:e4:7d:82:da:
82:b2:50:62:14:58:d3:e4:5f:9b:ce:48:cb:82:fc:f2:c6:f9:
74:e0:91:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:16:41 2026 by rpki-client